CVE-2013-1388

Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to obtain administrator-console access via unknown vectors...

Code injection

Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to obtain administrator-console access via unknown vectors...

CVE-2013-1388

CVE-2013-1388 affects Adobe ColdFusion 9.0 (before Update 10), 9.0.1 (before Update 9), 9.0.2 (before Update 4), and 10 (before Update 9). The vulnerability allows an attacker to obtain access to the administrator console via unknown vectors. Public sources consistently describe an unspecified vu...

CVE-2013-1388

Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to obtain administrator-console access via unknown vectors...

CVE-2013-1388: Undefined Security Weakness

Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to obtain administrator-console access via unknown vectors...

PT-2013-3126

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 9.0 through 9.0 before Update 10 Adobe ColdFusion version 9.0.1 through 9.0.1 before Update 9 Adobe ColdFusion version 9.0.2 through 9.0.2 before Update 4 Adobe ColdFusion version 10 through 10 before Update 9...

Trend Micro Control Manager CasLogDirectInsertHandler.cs XSRF

cross-site request forgery XSRF vulnerability has been reported in Trend Micro Control Manager. The vulnerability is due to an error while handling CasLogDirectInsert.aspx requests. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted URI. Successful...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allows attackers to obtain sensitive information via unknown vectors...

CVE-2011-0582

Adobe ColdFusion 8.0–9.0.1 administrator console contains an information-disclosure vulnerability (CVE-2011-0582). The connected Nessus entry (APSB11-04) aligns on multiple ColdFusion vulnerabilities, including this CVE, but the documents do not specify the root cause, affected subcomponents, or ...

CVE-2011-0582

Unspecified vulnerability in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allows attackers to obtain sensitive information via unknown vectors...

CVE-2011-0582: Undefined Security Weakness

Unspecified vulnerability in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allows attackers to obtain sensitive information via unknown vectors...

PT-2011-2467

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 8.0 through 9.0.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the administrator console. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via...

CVE-2011-0580: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-2861: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to 1 CFIDE/administrator/settings/mappings.cfm, 2 logging/settings.cfm, 3 datasources/index.cfm, 4...

CVE-2010-2861

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to 1 CFIDE/administrator/settings/mappings.cfm, 2 logging/settings.cfm, 3 datasources/index.cfm, 4...

Wing FTP Server - Cross Site Scripting Vulnerability

Security Advisory: Wing FTP Server - Cross Site Scripting Vulnerability ======================================================== Discovered Date: May 31, 2010 System affected: Wing FTP Server for Windows, Version 3.5.0 and prior version Vulnerability Description: ================== Wing FTP serve...

Wing FTP Server 3.2.4 - Cross-Site Request Forgery

Wing FTP Server 3.2.4 - Cross-Site Request Forgery Application: WingFTP Server 3.2.4 maybe earlier versions too Link: http://www.wftpserver.com/ Vulnerability: CSRF Author: Ams Contact: mail: ax330d at gmail dot com site: http://www.0x416d73.name/ 1. About software "Wing FTP server is not only a...

serv-u7 local exploit (php)-bug warning-the black bar safety net

by emptiness prodigal heart http://www.inbreak.net Note: since the author is lazy, does not provide log cleanup feature, it will leave a log: A, The su7 is the right there are several way? There are two forms to get rid of su7 in. 1, login to the Administrator Console page ==get the OrganizationI...

CVE-2006-5860: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...